> CIPE 1.5.2 has a check for 'packet length problem', which is executed before
> tunnel->recursion is increased, but if this check detects an error, it
> jumps to tx_error_out, which decrements the reference count, causing the
Of course that's a legitimate bug. Thanks for the report, I'll fix it.
The way I'd like to fix it is just moving the "recursion" check further
up just after the "magic" check, keeping the source more consistent.
Olaf